sushi-perp[.]xyz

The domain sushi-perp.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It presented itself as a legitimate SushiSwap staking portal under the page title 'Stake SUSHI | Sushi' but was designed to deceive users into disclosing wallet credentials or transferring funds to attacker-controlled addresses. No drainer kit was identified, though the site operated as a cryptocurrency scam. As of the latest verification, sushi-perp.xyz has been taken offline.

Technical analysis of sushi-perp.xyz reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Seclookup and Webroot, while Google Safe Browsing did not flag it. It appeared on one security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0 out of 100. Registered through NameSilo, LLC on July 12, 2025, the domain resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the United States. The SSL certificate was issued by R11.

Users who interacted with sushi-perp.xyz should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report any losses to the relevant blockchain explorer or wallet provider. To prevent further exposure, enable two-factor authentication on all accounts and avoid clicking on suspicious links. The domain can be reported to NameSilo, LLC for abuse, and additional submissions can be made to platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts.